Cybersecurity · VIDEO
Open Source: 14 project categories, risks and governance strategies
A study classifies 14 types of open source projects, highlighting how governance and funding influence stability and security. Critical differences between c...
KEY TAKEAWAYS
- Classification of 4,000 open source projects into 14 categories with various governance and funding models
- Category-specific risks: bus factor in one-person projects, underproduction in critical infrastructures like OpenSSL
- Behavioral differences between 'sticky' projects (social good) and 'magnetic' projects (conventional), with impacts on contributor retention
- Strategies to assess risks before adopting open source: relicensing risk in open-core products, governance in foundation-backed projects
